公开(公告)号：US08213609B2

公开(公告)日：2012-07-03

申请号：US12329673

申请日：2008-12-08

申请人： Masafumi Kusakawa ,  Seiichi Matsuda ,  Tomoyuki Asano ,  Harunaga Hiwatari

发明人： Masafumi Kusakawa ,  Seiichi Matsuda ,  Tomoyuki Asano ,  Harunaga Hiwatari

IPC分类号： H04L9/00

CPC分类号： H04L9/3073 ,  H04L9/3247 ,  H04L2209/601

摘要： A key generating device according to an embodiment of the present invention includes: a parameter determining unit that randomly determines a plurality of parameters that are needed when generating a secret key and a public key; a bilinear group selecting unit that selects a plurality of bilinear groups and bilinear mapping on the basis of the plurality of parameters; and a key generating unit that generates the secret key and the public key on the basis of the parameters and the plurality of bilinear groups.

摘要翻译： 根据本发明实施例的密钥生成装置包括：参数确定单元，其随机地确定在生成秘密密钥和公开密钥时所需的多个参数; 双线性组选择单元，其基于所述多个参数选择多个双线性组和双线性映射; 以及密钥生成单元，其基于所述参数和所述多个双线性组来生成所述秘密密钥和所述公开密钥。

公开(公告)号：US20100119058A1

公开(公告)日：2010-05-13

申请号：US12615421

申请日：2009-11-10

申请人： Seiichi Matsuda ,  Tomoyuki Asano ,  Masafumi Kusakawa ,  Harunaga Hiwatari

发明人： Seiichi Matsuda ,  Tomoyuki Asano ,  Masafumi Kusakawa ,  Harunaga Hiwatari

IPC分类号： H04L9/30

CPC分类号： H04L9/3073 ,  H04L2209/60

摘要： There is provided an information processing apparatus according to the invention including a bilinear map selection unit for selecting a bilinear map used for a predetermined operation, a group selection unit for selecting at least two types of groups G1 and G2 used in performing the operation, a determination parameter calculation unit for calculating a determination parameter including at least either one of a computation amount required for the predetermined operation and an information amount for the predetermined operation based on each of the selected at least two types of the groups, and a group decision unit for deciding a group used in performing the operation based on the determination parameter. The group decision unit exchanges contents of the groups G1 and G2 when the computation or information amount for the group G2 is more than that for the group G1.

摘要翻译： 提供了根据本发明的信息处理装置，其包括用于选择用于预定操作的双线性映射的双线性映射选择单元，用于选择执行操作中使用的组G1和G2中的至少两种类型的组选择单元， 确定参数计算单元，用于基于所选择的至少两种类型的组中的每一种来计算包括预定操作所需的计算量和预定操作的信息量中的至少一个的确定参数，以及组决策单元 用于基于确定参数来决定用于执行操作的组。 当组G2的计算或信息量大于组G1的组数量时，组决定单元交换组G1和G2的内容。

公开(公告)号：US08300816B2

公开(公告)日：2012-10-30

申请号：US12515298

申请日：2007-10-03

申请人： Tomoyuki Asano ,  Masafumi Kusakawa

发明人： Tomoyuki Asano ,  Masafumi Kusakawa

IPC分类号： H04L9/00

CPC分类号： H04L9/0822 ,  H04L9/0836 ,  H04L9/0891 ,  H04L2209/60

摘要： It relates to an information processing unit, a terminal unit, an information processing method, a key generation method and a program that enable reduction of the number of keys to be held by users and aims at providing an information processing unit capable of generating a directed-graph representing an encryption key generation logic to derive a set-key for encrypting a content or a content-key. The technique relates to a scheme that divides a set of user terminals into some subsets, allocates a set-key and an intermediate-key to each subset, and upon input of an intermediate-key correlated with a subset, outputs the set-key corresponding to the subset and the intermediate-key of the subset associated by the directed-edge. Further, it relates to a technique of replacing the directed-edge in the directed-graph with a shorter directed-edge. The effect of reducing the number of intermediate-keys held by each user is expected from the technique.

摘要翻译： 本发明涉及能够减少用户要保持的密钥数量的信息处理单元，终端单元，信息处理方法，密钥生成方法和程序，并且旨在提供一种能够产生定向的信息处理单元 其代表加密密钥生成逻辑，以导出用于加密内容或内容密钥的设置密钥。 该技术涉及将一组用户终端划分成某些子集的方案，为每个子集分配一个集合密钥和一个中间密钥，并且在与子集相关的中间密钥的输入时输出对应的集合密钥 到由所述有向边相关联的所述子集的子集和所述中间密钥。 此外，它涉及以较短的有向边替换有向图中的有向边的技术。 从技术上预期减少每个用户持有的中间密钥的数量的效果。

公开(公告)号：US20100054465A1

公开(公告)日：2010-03-04

申请号：US12515298

申请日：2007-10-03

申请人： Tomoyuki Asano ,  Masafumi Kusakawa

发明人： Tomoyuki Asano ,  Masafumi Kusakawa

IPC分类号： H04L9/26

CPC分类号： H04L9/0822 ,  H04L9/0836 ,  H04L9/0891 ,  H04L2209/60

摘要： It relates to an information processing unit, a terminal unit, an information processing method, a key generation method and a program that enable reduction of the number of keys to be held by users and aims at providing an information processing unit capable of generating a directed-graph representing an encryption key generation logic to derive a set-key for encrypting a content or a content-key. The technique relates to a scheme that divides a set of user terminals into some subsets, allocates a set-key and an intermediate-key to each subset, and upon input of an intermediate-key correlated with a subset, outputs the set-key corresponding to the subset and the intermediate-key of the subset associated by the directed-edge. Further, it relates to a technique of replacing the directed-edge in the directed-graph with a shorter directed-edge. The effect of reducing the number of intermediate-keys held by each user is expected from the technique.

摘要翻译： 本发明涉及能够减少用户要保持的密钥数量的信息处理单元，终端单元，信息处理方法，密钥生成方法和程序，并且旨在提供一种能够产生定向的信息处理单元 其代表加密密钥生成逻辑，以导出用于加密内容或内容密钥的设置密钥。 该技术涉及将一组用户终端划分成某些子集的方案，为每个子集分配一个集合密钥和一个中间密钥，并且在输入与子集相关的中间密钥时，输出对应的集合密钥 到由所述有向边相关联的所述子集的子集和所述中间密钥。 此外，它涉及以较短的有向边替换有向图中的有向边的技术。 从技术上预期减少每个用户持有的中间密钥的数量的效果。

公开(公告)号：US20090177888A1

公开(公告)日：2009-07-09

申请号：US12266692

申请日：2008-11-07

申请人： Tomoyuki ASANO ,  Masafumi Kusakawa

发明人： Tomoyuki ASANO ,  Masafumi Kusakawa

IPC分类号： H04L9/32 ,  G06F15/173

CPC分类号： H04L9/0836 ,  H04L9/3073 ,  H04L2209/601

摘要： There is provided an information processing device including an identifier setting unit for setting an identifier to a set of terminal devices corresponding to each node of a tree structure, and a key setting unit for setting a key distributed to the terminal device based on the identifier, wherein the identifier setting unit includes a first identifier indicating the set of terminal devices corresponding to each node, and sets the identifier so as to further include a second identifier showing a correspondence relation between plurality of subsets when the set includes a plurality of subsets.

摘要翻译： 提供了一种信息处理设备，包括：标识符设置单元，用于将标识符设置为与树结构的每个节点相对应的终端设备的集合;以及密钥设置单元，用于基于标识符设置分配给终端设备的密钥， 其中，所述标识符设置单元包括指示对应于每个节点的终端设备的集合的第一标识符，并且设置所述标识符，以便当所述集合包括多个子集时，还包括表示多个子集之间的对应关系的第二标识符。

公开(公告)号：US20100077201A1

公开(公告)日：2010-03-25

申请号：US12515235

申请日：2007-10-03

申请人： Tomoyuki Asano ,  Masafumi Kusakawa

发明人： Tomoyuki Asano ,  Masafumi Kusakawa

IPC分类号： H04L9/32 ,  G06F17/30 ,  G06F12/14 ,  H04L9/00

CPC分类号： H04L9/0833 ,  H04L9/0822 ,  H04L2209/60

摘要： There is provided an information processing unit enabling reduction of the number of keys to be held by a terminal unit and the amount of calculations necessary for decryption of encrypted data. The information processing unit configures an entire binary tree made up of n-number of leaf nodes, a root node and a plurality of intermediate nodes different from the root node and the leaf nodes and divides the entire tree into a plurality of base subtrees including n1/y number of leaf nodes to form a y-level (y is a divisor of log(n)) hierarchical structure, such that root nodes of the base subtrees at a lower level coincide with leaf nodes of the base subtree at an upper level. Further, it assigns subsets of the terminal units to nodes of the respective base subtrees and generates directed graphs where directed edges connecting coordinate points on a coordinate axis are set.

摘要翻译： 提供了一种信息处理单元，其能够减少由终端单元保持的密钥的数量和解密加密数据所需的计算量。 信息处理单元配置由n个叶节点，根节点和不同于根节点和叶节点的多个中间节点组成的整个二叉树，并将整个树分为多个基本子树，包括n1 / y叶节点数以形成y级（y是log（n）的除数）分层结构，使得较低级别的基本子树的根节点与上层的基本子树的叶节点一致 。 此外，它将终端单元的子集分配给各个基本子树的节点，并生成连接坐标轴上的坐标点的有向边被设置的有向图。

公开(公告)号：US20100040235A1

公开(公告)日：2010-02-18

申请号：US12532076

申请日：2008-02-05

申请人： Masafumi Kusakawa ,  Tomoyuki Asano

发明人： Masafumi Kusakawa ,  Tomoyuki Asano

IPC分类号： H04L9/08 ,  H04L9/00

CPC分类号： H04L9/0822 ,  G06Q20/3829 ,  H04L9/0836 ,  H04L9/0861 ,  H04L2209/60

摘要： A terminal device improved with a digraph generation method in a key distribution method of various types of broadcast encryption systems is provided. The terminal device includes an acquiring unit for acquiring information related to a set, which is selected from a plurality of sets representing a combination of a plurality of terminal devices, and which represents some or all of the plurality of terminal devices; an extracting unit for extracting the set contained in the information and to which it belongs; and a digraph generation unit for generating a directional branch for generating a key corresponding to the extracted set in a predetermined digraph formed by a plurality of directional branches.

摘要翻译： 提供了一种在各种广播加密系统的密钥分发方法中利用图生成方法改进的终端设备。 终端装置包括：获取单元，用于获取与表示多个终端装置的组合的多个集合中选择的表示与多个终端装置的部分或全部的集合有关的信息; 提取单元，用于提取包含在信息中并且它所属的信息集合的集合; 以及图形生成单元，用于生成用于在由多个有向分支形成的预定有向图中生成与所提取的集合相对应的密钥的有向分支。

公开(公告)号：US08600052B2

公开(公告)日：2013-12-03

申请号：US12447872

申请日：2007-08-17

申请人： Masafumi Kusakawa ,  Tomoyuki Asano

发明人： Masafumi Kusakawa ,  Tomoyuki Asano

IPC分类号： H04L9/08

CPC分类号： H04L9/0836 ,  H04L2209/60 ,  H04N7/165 ,  H04N7/1675 ,  H04N21/25816 ,  H04N21/25875 ,  H04N21/26613 ,  H04N21/63345 ,  H04N21/8355

摘要： A key generation device according to the present invention hierarchically constructs a Y-ary tree structure where n reception devices are assigned to leaves, and forms subgroups where individual intermediate nodes existing between the leaves and a root of the Y-ary tree structure are defined as parent nodes. By providing new parameters to the individual intermediate parameters, the subgroups can be formed flexibly. In a case where no excluded customer exists or the number of excluded customers is small, the size of a header to be delivered and the calculation amount of an operation that a customer needs to perform can be reduced.

摘要翻译： 根据本发明的密钥生成装置分级地构造其中n个接收设备被分配为离开的Y元树结构，并且形成子类，其中存在于叶子之间的单个中间节点和Y元树结构的根被定义为 父节点。 通过为各个中间参数提供新参数，可以灵活地形成子组。 在没有排除的客户存在或被排除的客户的数量小的情况下，可以减少要交付的报头的大小和客户需要执行的操作的计算量。

公开(公告)号：US08150040B2

公开(公告)日：2012-04-03

申请号：US12532076

申请日：2008-02-05

申请人： Masafumi Kusakawa ,  Tomoyuki Asano

发明人： Masafumi Kusakawa ,  Tomoyuki Asano

IPC分类号： H04L9/08

CPC分类号： H04L9/0822 ,  G06Q20/3829 ,  H04L9/0836 ,  H04L9/0861 ,  H04L2209/60

摘要： A terminal device improved with a digraph generation method in a key distribution method of various types of broadcast encryption systems is provided. The terminal device includes an acquiring unit for acquiring information related to a set, which is selected from a plurality of sets representing a combination of a plurality of terminal devices, and which represents some or all of the plurality of terminal devices; an extracting unit for extracting the set contained in the information and to which it belongs; and a digraph generation unit for generating a directional branch for generating a key corresponding to the extracted set in a predetermined digraph formed by a plurality of directional branches.

摘要翻译： 提供了一种在各种广播加密系统的密钥分发方法中利用图生成方法改进的终端设备。 终端装置包括：获取单元，用于获取与表示多个终端装置的组合的多个集合中选择的表示与多个终端装置中的一些或全部的集合有关的信息; 提取单元，用于提取包含在信息中并且它所属的信息集合的集合; 以及图形生成单元，用于生成用于在由多个有向分支形成的预定有向图中生成与所提取的集合相对应的密钥的有向分支。

公开(公告)号：US20100086133A1

公开(公告)日：2010-04-08

申请号：US12532091

申请日：2008-02-04

申请人： Tomoyuki Asano ,  Masafumi Kusakawa

发明人： Tomoyuki Asano ,  Masafumi Kusakawa

IPC分类号： H04L9/08

CPC分类号： H04L9/0822 ,  H04L9/0836 ,  H04L9/0861 ,  H04L2209/60

摘要： A key providing apparatus for providing a key used for encryption or decryption of data to a predetermined terminal device is provided. The key providing apparatus includes an acquiring unit for acquiring a digraph formed by arranging at least one directional branch connecting the coordinate points on a coordinate axis having a plurality of coordinate points each corresponded with a subset representing a combination of a plurality of terminal devices, an extracting unit for extracting information of all the directional branches contained in the directional path connecting a starting point of the digraph and a predetermined coordinate point, and a key generation unit for generating a key corresponded to a subset to which a predetermined terminal deice belongs based on the digraph, where the information of the directional branch is provided to the predetermined terminal device.

摘要翻译： 提供了一种用于向预定终端设备提供用于加密或解密数据的密钥的密钥提供设备。 密钥提供装置包括获取单元，用于获取通过布置连接坐标轴的至少一个有向分支而形成的图，所述坐标点具有多个坐标点，每个坐标点各自对应于表示多个终端设备的组合的子集， 提取单元，用于提取包含在连接图的起始点和预定坐标点的方向路径中的所有方向分支的信息;以及密钥生成单元，用于生成与基于预定终端设备所属的子集相对应的密钥 有向图，其中有向分支的信息被提供给预定的终端设备。